Usage notes
The usage notes for CSNBKPI2.
On each call to Key Part Import2, also specify a rule-array keyword to
define the service action: FIRST, ADD-PART, or COMPLETE.
- With the FIRST keyword, the input key-token must be a skeleton token (no key material). Use of the FIRST keyword requires that the Load First Key Part2 access control point be enabled in the default role.
- With the ADD-PART keyword, the service XORs the clear key-part with the key value in the input key-token. Use of the ADD-PART keyword requires that an Add Key Part2 access control point be enabled in the default role. The key remains incomplete in the updated key token returned from the service.
- With the COMPLETE keyword, the KEY-PART bit is set off in the updated key token that is returned from the service. Use of the COMPLETE keyword requires that the Complete Key Part2 access control point be enabled in the default role. The key_part_bit_length parameter must be set to zero.